Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer
File:                     iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer (raw, json)
Hash identifier:          q1J1f9lkhqcvmSs8EuWla3WZQUD7rZrsSOS+JPgDCKc=
Subject key identifier:   88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3593
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/iFbqVUmi9B2EfNhqRgtQJsFKbuM.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:15 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 63894
                          IP: 103.162.84.0/23
                          IP: 2407:1440::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13715 (0x3593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:15 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8856EA5549A2F41D847CD86A460B5026C14A6EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:01:82:7a:f5:8f:df:02:3a:b3:15:05:41:8a:
                    6f:c6:18:8c:f4:6f:8d:ba:f6:be:8c:8d:01:51:f1:
                    60:48:a8:2f:2b:28:9b:a5:22:18:d4:48:46:46:17:
                    39:ef:ea:8e:12:5c:48:70:5f:97:45:82:62:84:04:
                    32:2a:2b:7a:c3:76:60:59:fa:71:b8:0e:a7:b2:23:
                    b6:16:bd:e4:e3:9c:bb:4e:4e:e1:e5:ca:8b:29:b7:
                    89:f8:46:d5:c6:45:2c:17:71:49:aa:19:bb:44:89:
                    1f:6c:5a:c4:45:eb:13:1b:8d:7c:d8:4e:48:ce:2a:
                    f0:7e:fc:b6:a0:43:d3:40:49:52:5f:ba:f2:53:6a:
                    29:c8:2e:9a:2c:89:0f:69:a5:b3:71:d8:0c:9a:fa:
                    74:16:1f:f6:8c:60:1e:85:25:8f:91:b7:2c:55:4a:
                    7f:bc:d0:fc:fa:21:1e:11:07:09:21:10:39:b9:15:
                    b4:76:37:f4:f6:7e:e6:5c:44:ae:0c:c3:76:dd:e2:
                    4d:7c:83:b8:8b:2f:b4:be:3a:00:b4:1d:41:ee:63:
                    e1:08:3d:1f:94:57:e9:6e:eb:7a:71:0c:32:d5:ad:
                    f0:78:61:a3:e2:c8:6c:5d:6f:06:a5:c7:d9:ae:a5:
                    d8:13:45:42:79:33:93:d8:5a:fc:17:46:4c:45:af:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/iFbqVUmi9B2EfNhqRgtQJsFKbuM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63894

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.84.0/23
                IPv6:
                  2407:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:00:c9:90:d3:55:f4:79:fb:cc:8e:ee:c9:2e:e7:72:c6:9a:
         ed:b3:ca:e3:a8:46:22:fb:48:de:2f:70:9b:3c:27:dc:45:db:
         74:b0:68:11:bb:0d:0b:f2:1d:9a:ff:40:1e:06:78:18:77:ba:
         ee:4e:a1:66:66:46:aa:be:45:e9:60:c6:6b:ee:f5:10:cf:d2:
         97:56:56:a2:0d:6c:cd:4e:92:b6:90:60:06:6f:15:3b:b2:47:
         1c:00:fa:14:d9:ff:5d:54:e4:48:54:46:6e:18:62:ad:17:62:
         f1:c4:6a:4f:66:3d:82:7a:51:44:59:fc:c9:d0:21:94:b6:64:
         07:30:da:4e:54:b2:c3:89:2d:41:11:d2:49:10:ea:8a:16:de:
         bf:ca:4a:d0:1a:74:d6:d7:61:9b:a7:28:24:07:bf:24:fe:cf:
         2b:57:46:d5:62:ac:65:2e:8b:43:1b:ff:b6:41:38:05:08:21:
         0f:d3:78:87:11:a3:c3:1f:b6:b5:7e:3e:c8:c9:3d:45:a1:d5:
         78:b0:92:9a:f5:85:99:f5:8d:6e:d0:3d:e9:60:70:d6:70:2e:
         fa:db:0d:62:5b:e8:6c:db:df:ba:59:49:d8:5d:c3:0a:2e:1c:
         8d:60:b9:bc:0b:25:ce:4b:16:22:d5:32:3b:d6:6e:bd:d5:76:
         4c:62:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:47:49 2025 by rpki-client